Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pznbYPn8cbGkRKlFPIZbRkImOnI.cer
File: pznbYPn8cbGkRKlFPIZbRkImOnI.cer (raw, json)
Hash identifier: kA3WYh/GxDAQLwKYWaop/3yO2t5dFTcmMInVEymRgs8=
Subject key identifier: A7:39:DB:60:F9:FC:71:B1:A4:44:A9:45:3C:86:5B:46:42:26:3A:72
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0186930A73AE3193D3865A01608613DC5A61
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/06/7306a8-7e49-4c95-acc5-5735e045d4c1/1/pznbYPn8cbGkRKlFPIZbRkImOnI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/06/7306a8-7e49-4c95-acc5-5735e045d4c1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 27 Feb 2023 13:23:01 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 212.18.97.0/24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:93:0a:73:ae:31:93:d3:86:5a:01:60:86:13:dc:5a:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 27 13:23:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a739db60f9fc71b1a444a9453c865b4642263a72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:0e:b1:45:80:37:fb:64:4e:70:7c:d4:6f:09:
cc:d3:21:7b:19:4b:6d:68:72:82:19:c0:c6:79:60:
af:50:72:d8:71:2b:65:94:4b:5b:30:63:0d:ff:ee:
22:cc:5c:32:ae:42:d7:8e:a0:76:85:a1:83:2f:69:
c4:89:59:2d:da:50:e4:da:f0:62:ff:2d:7b:1b:80:
eb:9a:b7:ce:e5:5e:91:f7:15:96:a5:f9:aa:e5:ad:
4c:ab:27:a0:e8:b7:53:40:0b:d9:71:de:f0:86:9a:
6b:b7:4e:75:f6:1c:69:4c:8a:39:8b:8c:be:1f:a1:
81:78:14:e0:39:6d:1f:f9:65:10:a0:8a:85:32:11:
3b:ce:f5:c2:23:06:7d:4c:3a:70:c1:dc:4b:c2:a7:
52:82:0f:b9:ae:fe:65:87:ec:e7:33:c7:80:e4:29:
0a:7a:6b:4f:40:78:34:d9:c7:09:66:4a:da:8e:3f:
b3:4a:5b:43:3b:af:b3:56:c7:a1:8b:84:a7:74:cb:
00:71:27:e4:15:b4:4e:ea:f4:e5:ef:3b:c4:26:4b:
0c:62:c7:3c:6a:c1:05:eb:7d:69:22:6d:a8:52:1d:
83:32:d5:8f:5d:28:2b:66:34:9c:5a:e2:fb:73:b6:
95:c0:c2:ef:55:ce:33:35:7a:65:c6:e2:78:21:ef:
c5:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:39:DB:60:F9:FC:71:B1:A4:44:A9:45:3C:86:5B:46:42:26:3A:72
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/7306a8-7e49-4c95-acc5-5735e045d4c1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/7306a8-7e49-4c95-acc5-5735e045d4c1/1/pznbYPn8cbGkRKlFPIZbRkImOnI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.18.97.0/24
Signature Algorithm: sha256WithRSAEncryption
31:df:3e:3e:93:09:8a:d3:2a:79:71:24:08:33:a5:39:dd:39:
52:68:33:92:9c:ef:fe:ef:79:d8:73:64:a6:07:2e:da:18:7e:
54:1f:bc:ca:10:2d:ec:c8:73:24:e1:26:aa:5f:22:a9:e4:82:
94:26:de:8e:90:dc:3c:b6:bb:d5:82:d6:13:6f:7f:6b:bd:6e:
7f:ed:0e:eb:3e:e0:7d:b2:17:e0:1f:9e:f6:a6:ee:b6:24:7b:
62:fd:92:9f:5e:b0:74:9a:d3:cd:50:31:29:27:e5:3b:3b:fd:
3e:e8:27:13:ef:b6:c5:8b:d4:e1:6f:de:a9:26:90:fa:14:9a:
b8:a9:da:f9:48:d9:52:4b:f8:28:88:c5:65:fa:d0:36:39:61:
ef:01:c5:2e:9c:42:eb:14:9d:a6:04:d1:29:23:ea:0e:be:21:
57:ab:98:49:a0:6a:61:c0:9b:ec:2d:05:64:85:4a:4a:92:f4:
63:b2:ec:79:4c:63:d5:fe:ba:d4:ec:fc:d4:39:d0:48:b0:d9:
8d:4f:d1:8e:87:ce:56:e5:39:95:b2:26:a6:28:8e:df:06:9d:
fd:74:ee:fa:74:45:57:5a:fa:e1:40:b3:b4:02:59:c0:c1:f6:
d1:1c:1a:c8:12:7b:26:06:de:00:a3:83:68:03:92:3f:76:34:
08:01:88:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 24 13:01:03 2023 by rpki-client on console-fra.rpki-client.org